Lead Data Security Solution Engineer

EPAM Systems; Turkey; On-site; TRY 4,502,000 - 9,005,000; Full time

Benefits offered by this job

Continuous upskilling and learning

Diversity of tasks and projects

Mentoring programs and leadership

English courses

Extra leave days

Referral bonuses

Private health insurance

Recreation areas and kitchens

IT Equipment

Home Use Program

Job summary

EPAM Systems Inc. seeks a Lead Data Security Solution Engineer to design secure data-in-licensing solutions. You will examine requirements, evaluate database platforms, and architect authentication, authorization, and auditing at the data layer.

You will implement row/column security, data masking, and policy-based controls, while coordinating with IAM, security, and governance teams. This role emphasizes leadership and hands-on database security delivery.

Qualifications

• 5+ years of experience in data security / database security with leadership exposure.
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens and secrets management.

Responsibilities

• Examine Data In-Licensing requirements, data flows and entitlement rules to identify security controls.
• Design authentication and authorization for named users, workloads, and tools connecting to databases.
• Build database-level controls (row/column security, dynamic masking, views) enforcing data-layer security.
• Create auditing to capture data access, actions, and identity; enable searchable telemetry for investigations.
• Define revocation, deletion, and data-removal approaches across backups, archives, and replicas.
• Define and run POC architectures for secure connectivity, authentication, authorization, auditing and deletion scenarios.

Skills

Relational databases

SQL

IAM

OAuth 2.0

OIDC

Auditing

Data lifecycle

Leadership

Data security design

Data privacy

Education

Bachelor's degree in Computer Science or related field

Tools

Auditing tools

Logging pipelines

Job description

We are looking for a Lead Data Security Solution Engineer to examine requirements created by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing.The environment is largely relational, with primary enforcement at the data and database layer, focusing on identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.ResponsibilitiesExamine Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; evaluate relational database platforms, schemas, connectivity methods, query patterns, and pinpoint where licensed data is stored, transformed, replicated, extracted, or backed upEvaluate current database security capabilities and pinpoint gaps, constraints, risks, and prerequisitesDesign authentication for named users, service identities, workloads, and analytical tools connecting to databases; assess OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; minimize reliance on shared or long-lived credentialsBuild database-level controls limiting access to authorized users, groups, services, or licensing populations; apply row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logicCreate database auditing that captures who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; make audit records searchable, protected, and useful for investigationBuild controls for access revocation when users change roles or licensing rights expire; design methods to locate and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanismsConvert requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; partner with database, IAM, security architecture, infrastructure, application, and governance teamsChoose database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendationsRequirements5+ years of relevant experience, including at least 1 year in a leadership roleHands-on background in relational databases, SQL, and database architecture, including schemas, roles, privileges, and access pathsPractical expertise in database-level authorization, including row-level and column-level controls or fine-grained mechanismsStrong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets managementBackground in designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelinesProficiency in database auditing, query/activity monitoring, centralized logging, alerting, and investigation supportUnderstanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implicationsCapability to assess heterogeneous database technologies and design platform-appropriate controlsSkills in architecture, engineering, troubleshooting, documentation, and stakeholder collaborationEnglish proficiency at an Upper-Intermediate level (B2) or higherNice to haveFamiliarity with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologiesBackground in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environmentsExpertise in designing and running security POCs and turning validated patterns into production-ready designsKnowledge of privacy, contractual-use restrictions, segregation, and evidence requirements that apply to licensed dataWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.